Commit Graph

16 Commits

Author SHA1 Message Date
Rich Megginson
d1761c9d68 System roles release 1.23.0-2.11
Resolves: RHEL-21400 : postgresql - unable to install PostgreSQL version 15 on RHEL 9
Resolves: RHEL-23309 : storage - tests_lvm_auto_size_cap_nvme_generated failed at "Assert expected size is actual size"
(cherry picked from commit 6a179c582c)
2024-01-31 13:10:00 -07:00
Rich Megginson
b1140e717e system roles update 1.23.0-2.5
Resolves: RHEL-3241 - bootloader - Create bootloader role (MVP)
(cherry picked from commit bea518c9cd)
2024-01-15 16:17:04 -07:00
Rich Megginson
6e095f7bc5 system roles update 1.23.0-2.4
Resolves: RHEL-15872 : RHEL for Edge support in system roles
  updated several roles with ostree improvements
  metrics role support
Resolves: RHEL-16542 : fapolicyd - feat: Import code for fapolicyd system role
  several role improvements
Resolves: RHEL-4684 : ha_cluster - fix: set sbd.service timeout based on SBD_START_DELAY
Resolves: RHEL-19047 : logging - fix: avoid conf of RatelimitBurst when RatelimitInterval is zero
Resolves: RHEL-18170 : metrics - [RFE] Metrics system role support for configuring PMIE webhooks
Resolves: RHEL-19242 : podman - fix: add no_log: true for tasks that can log secret data
Resolves: RHEL-18963 : postgresql - feat: enable using postgresql 16
Resolves: RHEL-16977 : rhc - rhc: support RHEL 7 managed nodes
Resolves: RHEL-19042 : selinux - fix: no longer use "item" as a loop variable
Resolves: RHEL-19044 : selinux - fix: Print an error message when module to be created doesn't exist
Resolves: RHEL-14022 : storage - Basic support for creating shared logical volumes
(cherry picked from commit 709df3b6b5)
2023-12-12 15:43:35 -07:00
Rich Megginson
0c792715ec System Roles update 1.23.0-2.1
Resolves: RHEL-15872
RHEL for Edge support in system roles
except for nbde_client, rhc, metrics

Resolves: RHEL-17667
ad_integration - feat: Add sssd custom settings

Resolves: RHEL-16542
fapolicyd - feat: Import code for fapolicyd system role

Resolves: RHEL-14090
ha_cluster - [RFE] HA Cluster system role should be able to enable Resilient Storage repository

Resolves: RHEL-4624
ha_cluster - [FutureFeature] Allow ha_cluster role to configure fencing topology

Resolves: RHEL-3264
ha_cluster - [FutureFeature] Allow ha_cluster role to configure all qdevice options

Resolves: RHEL-3354
kdump - fix: retry read of kexec_crash_size

Resolves: RHEL-15933
logging - feat: Add support for the global config option preserveFQDN with a new logg…

Resolves: RHEL-15440
logging - feat: Add support for general queue and general action parameters

Resolves: RHEL-15038
logging - fix: check that logging_max_message_size is set, not rsyslog_max_message_size

Resolves: RHEL-16501
network - Ansible RHEL network system role issue with ipv6.routing-rules the prefix length for 'from' cannot be zero"

Resolves: RHEL-15871
selinux - fix: Use `ignore_selinux_state` module option

Resolves: RHEL-16213
storage - feat: Support for creating volumes without a FS
2023-11-30 14:38:56 -07:00
Sergei Petrosian
2f1534c8c5 Update 1.23.0-1
- Resolves: RHEL-5345 spec - Remove with_html, instead use built-in .README.html
- Resolves: RHEL-5985 ansible-sshd - Manage SSH certificates
- rhbz#2224648: Remove ad_integration patch and use the latest ad_integration
  version instead. Vendor community-general.ini_files for
- RHEL-1119: ad_integration: Support for dynamic DNS Updates
- Change link to open new issue in galaxy.yml from deprecated BZ to Jira
2023-10-27 12:45:09 +02:00
Rich Megginson
958fb35d1f second RC for 1.22.0 rhel 8.9 and 9.3
Resolves:rhbz#2232391
kdump - "Write new authorized_keys if needed" task idempotency issues

Resolves:rhbz#2232392
kdump - system role fails if kdump_ssh_user doesn't have a .ssh/authorized_keys file in home directory

Resolves RHEL-1398
kdump - fix: ensure .ssh directory exists for kdump_ssh_user on kdump_ssh_server

Resolves RHEL-1500
kdump - fix: Ensure authorized_keys management works with multiple hosts

Resolves:rhbz#2224648
firewall - fix: reload on resetting to defaults

Resolves RHEL-1496
firewall - fix: files: overwrite firewalld.conf on previous replaced

Resolves RHEL-1498
storage - fix: use stat.pw_name, stat.gr_name instead of owner, group

  sshd README remove upstream only docs
  first RC for 1.22.0 rhel 8.9 and 9.3
  fix firewall reload test gather facts

(cherry picked from commit a0cc364663)
2023-08-22 10:58:51 -06:00
Rich Megginson
33f14412d7 first RC candidate for 8.9/9.3 - 1.22.0-1
Resolves:rhbz#2224648 : firewall - fix: reload on resetting to defaults
sshd README remove upstream only docs
first RC for 1.22.0 rhel 8.9 and 9.3

(cherry picked from commit 374357ec37)
2023-08-15 11:50:03 -06:00
Rich Megginson
d599aa4661 podman, firewall, rhc, kdump updates
podman - use getsubids to look for subuid, subgid for IdM support
Resolves RHEL-866

podman - allow to not pull images, continue if image pull fails
Resolves RHEL-858

firewall - fix: reload on resetting to defaults
Resolves:rhbz#2224648

podman - Podman system role:  Unable to use podman_registries_conf to set unqualified-search-registries
Resolves:rhbz#2226077

firewall - Ansible RHEL firewall system role not idempotent when configuring the interface using the role in rhel9
Resolves RHEL-918

kdump - use failure_action instead of default on EL9 and later
Resolves RHEL-907

firewall - Check mode fails with replacing previous rules
Resolves RHEL-899

rhc - baseurl in rhsm.conf is empty when rhc_baseurl is not specified
Resolves:rhbz#2227823
2023-08-02 07:51:03 -06:00
Rich Megginson
bc36408307 new role systemd; fix fact gathering; podman quadlet; others
podman - allow container networking configuration
Resolves:rhbz#2220963

podman - support for healthchecks and healthcheck actions
Resolves:rhbz#2220961

podman - support quadlet units
Resolves:rhbz#2220962

systemd - system role for managing systemd units
Resolves:rhbz#2224388

ALL - facts being gathered unnecessarily
Resolves:rhbz#2223036

certificate - rhel-system-roles.certificate does not re-issue after updating key_size
Resolves:rhbz#2186057

firewall - Check mode fails when creating new firewall service
Resolves:rhbz#2222433

firewall - should have option to disable conflicting services
Resolves:rhbz#2222809

firewall - when firewalld.service is masked, firewall role fails
Resolves:rhbz#2222808

storage - RAID volume pre cleanup - remove existing data from member disks as needed before creation
Resolves:rhbz#2224094
2023-07-21 09:31:16 -06:00
Rich Megginson
152e7f8d15 kdump crashkernel
kdump - support auto_reset_crashkernel, dracut_args, deprecate /etc/sysconfig/kdump
Resolves:rhbz#2211272

(cherry picked from commit e8f086ad49)
2023-06-20 13:56:43 -06:00
Rich Megginson
97040c488e updates for network, rhc, selinux, storage
network - Support configuring auto-dns setting
Resolves:rhbz#2211273

rhc - implement rhc_proxy.scheme
Resolves:rhbz#2211778

storage - RFE for the storage system role to support configuring the stripe size for RAID LVM volumes
Resolves:rhbz#2141961

selinux - use restorecon -T 0 on supported platforms
Resolves:rhbz#2211271

storage - Failed to commit changes to disk: Failed to format device: Input/output error
Resolves:rhbz#2211247
2023-06-06 17:13:49 -06:00
Rich Megginson
b5368f3185 updates for gather_facts, rhc insights tags, tlog proxy provider
rhc - system role does not apply Insights tags
Resolves:rhbz#2209441

tlog - use the proxy provider - the files provider is deprecated in sssd
Resolves:rhbz#2191702

roles should support running with gather_facts: false
Resolves:rhbz#2190500

(cherry picked from commit 17eff1975a)
2023-05-30 15:39:13 -06:00
Rich Megginson
4c72d73cf8 Initial official build for 9.3/8.9 - new role postgresql
fingerprint in config files managed by roles
Resolves:rhbz#2186910

ha_cluster - Add possibility to load SBD watchdog kernel modules
Resolves:rhbz#2190478

ha_cluster - support for resource and operation defaults
Resolves:rhbz#2190483

postgresql - [RFE] system role for PostgreSQL management
Resolves:rhbz#2151371

rhc - [RFE] New role for Red Hat subscription management, insights management [rhel-8.9.0]
Resolves:rhbz#2179016

ha_cluster - use pcs to setup qdevice certificates if available
Resolves:rhbz#2190480

spec: Remove doc fragments from vendored modules
Resolves:rhbz#2186198

roles should support running with gather_facts: false
Resolves:rhbz#2190500

use ansible-galaxy collection build/install instead of tar
Resolves:rhbz#2175326

rhc - RHC system role: activation key registration fails if system is already registered
Resolves:rhbz#2186908

selinux - failing test - sshd/tests_firewall_selinux.yml - No package matching 'firewalld' found available, installed or updated
Resolves:rhbz#2190499
2023-05-04 08:43:08 -06:00
CentOS Sources
f322c8d9b2 Auto sync2gitlab import of rhel-system-roles-1.21.1-1.el8_8.src.rpm 2023-03-22 06:10:05 +00:00
CentOS Sources
1bface43a1 Auto sync2gitlab import of rhel-system-roles-1.21.0-0.16.el8.src.rpm 2023-02-05 06:09:39 +00:00
CentOS Sources
554149c6f5 Auto sync2gitlab import of rhel-system-roles-1.21.0-0.15.el8.src.rpm 2023-01-28 06:13:55 +00:00